If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Hello Guest,Our records indicate that you have never posted to our site before! Why not make your first post today by saying hello to our community in our Introductions forum.

Please review the forums rules, start with your first post today and become an active part of petri.co.il forums now!

Group Policies User & Computer Sections, Printing

6th March 2007, 12:27

I tried adding a logon script to all machine on a particular floor of our building so I created an OU and added a test machine inside it. I created a GPO specifically for that OU and assigned the logon script I wanted under Logon Scripts in the USER section of the GPO.

Tested it, but it didn't work, nothing executed, so I used RSoP to check if it was properly applied. The only content of the OU was the machine account so I did RSoP on that object.

Of course, it showed the policy wasn't applied, only the Computer section was applied to it. So it seems that the computer section is applied to computer objects and the User section is applied to user objects. Ok, I should have known that but it's been many years since I did the theory.

The question now is:

Is there not a way to make sure that for a bunch of computers, any user who logs on to those computers will get some GPO settings if they log on to those computers but not if they log on to other computers?

As a workaround, I have created OUs for users and split them up this way to get the policies to them, but it seems to me that my first idea of making a policy apply to computers and any users that log on to those computers is a smarter way of doing it for what I want to do.

This is all so I can assign the default printer for whoever is on a machine to be the printer on the same floor as the machine (makes sense). Since it is the location of the machine which should determine the default printer used, not the user account I would prefer if I could do it my original way.

"Group Policy applies to the user or computer in a manner that depends on where both the user and the computer objects are located in Active Directory. However, in some cases, users may need policy applied to them based on the location of the computer object alone. You can use the Group Policy loopback feature to apply Group Policy Objects (GPOs) that depend only on which computer the user logs on to. "

\Rem

This posting is provided "AS IS" with no warranties, and confers no rights.__________________